Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a633030323a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a633030323a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          9Lh3wOAoIRluIWN+u2x3Lv3CTW2Xdvf6RR52RAEDDYM=
Subject key identifier:   D7:5E:E6:AF:32:DA:B9:7E:EC:68:EB:38:3D:63:D5:00:15:15:58:CB
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       18BA30339749721938AF81DC91DCDC2636FA4F75
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a633030323a3a2f34382d3438203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:43 +0000
ROA not before:           Thu 09 Mar 2023 20:12:43 +0000
ROA not after:            Thu 07 Mar 2024 20:17:43 +0000
asID:                     28260
IP address blocks:        2804:28e4:c002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ba:30:33:97:49:72:19:38:af:81:dc:91:dc:dc:26:36:fa:4f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:43 2023 GMT
            Not After : Mar  7 20:17:43 2024 GMT
        Subject: CN=D75EE6AF32DAB97EEC68EB383D63D500151558CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:f5:27:6b:84:40:b5:f2:af:77:31:d4:8e:
                    6d:1d:6a:0e:f8:2f:e8:4d:a7:10:e4:d6:78:26:23:
                    6f:35:6c:69:71:a0:45:ae:6a:77:d1:21:17:8e:a5:
                    8d:0a:11:3b:53:6b:5d:32:37:e7:01:92:e0:b4:d0:
                    32:b6:bf:46:ec:a5:04:9e:a8:e8:de:93:c5:3c:8a:
                    f0:f6:d0:f9:60:fb:7a:70:af:cb:79:3d:63:fd:9b:
                    53:e5:90:17:81:31:bf:42:90:85:db:24:e4:40:e0:
                    a5:63:7c:a5:31:21:17:84:e9:c3:84:57:2d:6f:68:
                    81:35:3d:a3:96:60:8d:5c:f3:ba:92:87:d7:ec:ee:
                    d6:be:6f:a6:80:be:1d:9b:7d:fa:5f:b8:09:ff:24:
                    d3:56:30:93:82:b2:cb:0b:ed:77:a4:c3:ee:fc:5a:
                    9a:a0:4a:fc:47:58:87:58:f0:b7:88:17:9a:5d:02:
                    bd:1b:1b:ce:fb:98:53:81:d5:34:b7:5f:17:52:1b:
                    be:08:7f:14:41:06:e6:a4:e9:e7:cd:da:36:55:9c:
                    a7:79:4a:1b:84:91:6b:2b:f4:67:74:8c:b5:15:ae:
                    be:73:fe:9f:23:9a:b2:29:a3:00:b2:8f:d4:57:3f:
                    36:e6:06:99:e0:7f:90:ee:c9:0a:0d:1b:0e:ef:f0:
                    5c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:5E:E6:AF:32:DA:B9:7E:EC:68:EB:38:3D:63:D5:00:15:15:58:CB
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a633030323a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:c002::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:4e:bb:7b:58:1b:d6:07:ce:ee:05:b8:40:d5:6e:4f:fe:4a:
         7c:57:20:8d:e4:d4:4a:5b:db:55:c9:12:5c:ab:85:d2:f2:06:
         46:91:e9:c4:15:36:dc:8e:7e:48:19:81:aa:2f:36:f7:4d:d7:
         51:eb:5f:c1:bd:7d:ff:6d:39:74:8f:67:fb:88:14:09:ea:a7:
         a8:e5:54:00:82:90:0c:69:c1:bd:2b:e7:45:fa:5d:26:c1:7d:
         51:13:97:5f:b8:bc:97:72:af:5d:36:29:47:e1:b3:58:1e:aa:
         1d:37:22:3a:7e:8a:9d:3e:a7:82:7d:75:a7:12:83:52:c3:fa:
         aa:50:9d:9a:a0:1e:6e:b1:35:5a:3e:5f:f0:87:41:d3:3c:0c:
         95:2c:32:70:d8:15:18:8c:95:d6:a1:19:87:ae:47:c9:1b:c6:
         ce:7d:dc:8d:ca:d9:3a:47:e7:ed:8a:29:56:67:1c:54:a1:5f:
         63:c9:a7:f4:a2:28:d5:12:45:fd:b7:aa:51:40:3f:06:10:29:
         1d:31:99:94:ce:e1:e6:72:2b:22:76:56:56:83:b5:46:0b:6f:
         3c:c7:6b:ab:7f:07:4b:28:87:18:1e:ba:4f:b3:6d:e6:e3:0e:
         61:6d:49:2a:a1:48:02:2a:37:cc:00:60:9d:b8:97:78:14:e0:
         21:33:9b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org